From: Ardis Lu <ardisglu@gmail.com>
Date: Thu, 18 Jun 2026 06:18:31 +0000 (-0700)
Subject: Reset `prf` on incomplete request
X-Git-Tag: v0.1.3~4
X-Git-Url: https://git.ardis.lu/?a=commitdiff_plain;h=29222536ecea62122bcd234212f80ced71b1b5dc;p=envpass

Reset `prf` on incomplete request
---

diff --git a/src/getPrf.js b/src/getPrf.js
index caa5257..264fe3c 100644
--- a/src/getPrf.js
+++ b/src/getPrf.js
@@ -153,6 +153,7 @@ export async function getPrf(options = {}) {
       });
       request.on('end', () => {
         if (offset !== 32) { // Not all 32 PRF bytes were from passkey
+          prf.fill(0);
           response.writeHead(400).end();
           return;
         }